CSD Service Finder

@rcrichton if you could please review when you get a chance?

There are settings now for picking the denormalization paths (PR and FR), e.g. pr.denormalization=openldap.

Facilities on CSD don't have an "otherID" attribute, so we can only validate on primary id oid at this stage. This probably isn't ideal, as we'd need to cross-reference a fosaid.